The crypto industry is on the cusp of a revolution where AI agents manage transactions, trades, and payments, but recent findings suggest that the underlying infrastructure may be vulnerable to security breaches. According to a McKinsey projection, AI agents could facilitate $3 trillion to $5 trillion in global consumer commerce by 2030. Coinbase founder Brian Armstrong predicts that AI agents will soon outnumber humans in making online transactions, while Binance founder Changpeng Zhao forecasts that agents will make a million times more crypto payments than people.
However, a team of security researchers and academics has uncovered a significant flaw in the AI infrastructure that could expose crypto wallets to theft. The researchers, affiliated with the University of California, Santa Barbara, the University of California, San Diego, Fuzzland, and World Liberty Financial, discovered that LLM routers, which act as intermediaries between users and AI models, can be exploited by malicious actors to steal credentials and drain crypto wallets.
These routers have unrestricted access to sensitive data, including private keys, API credentials, and wallet access tokens, which are often transmitted in plain text. The researchers found that a single compromised router can compromise an entire system, and they demonstrated how easy it is to expand the attack by 'poisoning' parts of the router ecosystem. This creates a cascading risk, where even if a user trusts their AI provider, the infrastructure in between may not be trustworthy. The implications are severe for crypto users, as exposed credentials can be copied and reused without the user's knowledge.
The researchers warn that the lack of guarantees that outputs haven't been tampered with creates a potential mismatch between the growing use of AI agents in crypto activity and the underlying infrastructure's security.